This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json) Hash identifier: veHoBrL/dOS2DkLGSLtK6yN/+3lfR6P+0fMh2xyRq38= Subject key identifier: 15:1A:2A:FA:48:23:15:DB:98:DB:2F:49:8B:23:7A:14:75:F4:87:5B Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Certificate serial: 019B4392DE59B5C2D61DCA2FCC9B36F87724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft Manifest number: 0BFC Signing time: Mon 22 Dec 2025 01:00:57 +0000 Manifest this update: Mon 22 Dec 2025 01:00:57 +0000 Manifest next update: Tue 23 Dec 2025 01:00:57 +0000 Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=) 2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: /cgg4hkKrY9ZDM4z5+L7cxZVAgWcBKoIBbhfuPioAH0=) 3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:de:59:b5:c2:d6:1d:ca:2f:cc:9b:36:f8:77:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Validity Not Before: Dec 22 01:00:57 2025 GMT Not After : Dec 23 01:00:57 2025 GMT Subject: CN=151a2afa482315db98db2f498b237a1475f4875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:96:bc:a8:d4:9c:4d:58:f2:7e:46:38:bc: e2:37:40:42:9d:84:a9:fd:78:44:7f:16:9f:16:8a: 97:6d:82:d1:8e:2b:8d:e8:97:70:1f:a9:dd:ad:60: 84:36:d1:b7:d4:f7:05:e1:60:60:70:53:c6:d5:ba: 3d:10:a8:0c:90:54:52:d5:86:31:15:b2:92:14:4c: 23:c1:6f:fe:4f:13:2d:ae:6c:75:0d:98:74:d2:e0: 96:f9:f0:ad:71:89:1b:03:bb:d8:6f:7f:42:f1:af: db:02:90:70:39:f0:49:38:01:1f:20:3f:f6:7a:ad: 6b:4d:aa:f4:a0:f6:e6:8a:49:32:d1:43:1a:0d:31: 06:d1:bc:6f:c2:60:97:79:28:2e:d5:30:c6:0b:c0: a9:0d:7b:b4:41:cb:f6:d1:3a:8a:dc:f8:87:c0:60: 8b:c2:67:3c:8d:9e:b8:8f:c1:60:db:02:da:cf:6b: e2:5e:6d:4a:64:39:61:eb:7b:bc:b7:36:a9:c3:a1: 79:ff:6e:84:48:1a:d5:24:a7:cd:e8:e0:e9:5e:c3: 54:61:0c:23:49:d8:fd:e7:1e:e6:b4:b1:34:a4:dd: 80:d3:9c:ff:6b:98:90:81:de:3e:a2:48:41:03:fe: f7:68:c5:64:b3:de:a6:49:ae:2d:eb:2a:2e:cf:c2: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1A:2A:FA:48:23:15:DB:98:DB:2F:49:8B:23:7A:14:75:F4:87:5B X509v3 Authority Key Identifier: keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:78:ba:22:11:1c:67:33:0e:9d:c7:81:59:4b:45:b7:7b:2d: bd:b9:5f:b1:19:68:0b:28:2d:b1:c0:52:b0:be:78:1d:44:3d: 0c:dc:a8:7d:79:2f:07:43:12:db:df:e4:67:6d:e3:ea:ca:43: 2c:b7:7b:c7:41:88:a5:c6:5a:79:38:6c:57:b5:b3:26:b2:54: e7:ef:12:cf:4d:b7:e2:f8:b0:ae:09:a1:26:8c:55:77:38:ce: 6a:a3:f4:52:bd:38:e0:9f:ed:c4:d0:c1:05:6b:7b:ed:f8:7c: 5e:d7:0d:43:13:ff:a5:98:47:de:32:9c:8d:18:b3:7c:c0:dd: 6c:95:3a:e9:da:72:a8:af:1b:fa:fd:82:87:f0:c1:0f:c6:ce: e3:36:d2:db:dd:71:d5:31:f4:3e:72:67:d0:35:76:8b:56:e6: db:aa:7d:63:a8:64:75:6e:0c:aa:4a:5a:51:7c:3e:be:e8:69: 6d:80:c2:2d:14:95:0a:59:7d:d4:f6:6e:67:73:97:1c:2b:00: e9:0c:6e:34:43:89:e7:8e:1b:b2:7f:eb:30:0f:a0:10:36:31: 1e:93:69:f2:37:b0:1a:06:f0:0a:5d:63:6a:46:7d:ec:37:96: 3e:81:7f:0b:1e:da:9d:8a:ce:4f:a0:2e:8b:da:87:a4:3c:8b: 37:b1:42:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkt5ZtcLWHcovzJs2+HckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4 NmIxMGYwHhcNMjUxMjIyMDEwMDU3WhcNMjUxMjIzMDEwMDU3WjAzMTEwLwYDVQQD EygxNTFhMmFmYTQ4MjMxNWRiOThkYjJmNDk4YjIzN2ExNDc1ZjQ4NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKSWvKjUnE1Y8n5GOLziN0BCnYSp /XhEfxafFoqXbYLRjiuN6JdwH6ndrWCENtG31PcF4WBgcFPG1bo9EKgMkFRS1YYx FbKSFEwjwW/+TxMtrmx1DZh00uCW+fCtcYkbA7vYb39C8a/bApBwOfBJOAEfID/2 eq1rTar0oPbmikky0UMaDTEG0bxvwmCXeSgu1TDGC8CpDXu0Qcv20TqK3PiHwGCL wmc8jZ64j8Fg2wLaz2viXm1KZDlh63u8tzapw6F5/26ESBrVJKfN6ODpXsNUYQwj Sdj95x7mtLE0pN2A05z/a5iQgd4+okhBA/73aMVks96mSa4t6youz8LR7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUaKvpIIxXbmNsvSYsjehR19IdbMB8GA1UdIwQY MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEni6IhEc ZzMOnceBWUtFt3stvblfsRloCygtscBSsL54HUQ9DNyofXkvB0MS29/kZ23j6spD LLd7x0GIpcZaeThsV7WzJrJU5+8Sz0234viwrgmhJoxVdzjOaqP0Ur044J/txNDB BWt77fh8XtcNQxP/pZhH3jKcjRizfMDdbJU66dpyqK8b+v2Ch/DBD8bO4zbS291x 1TH0PnJn0DV2i1bm26p9Y6hkdW4MqkpaUXw+vuhpbYDCLRSVCll91PZuZ3OXHCsA 6QxuNEOJ544bsn/rMA+gEDYxHpNp8jewGgbwCl1jakZ97DeWPoF/Cx7anYrOT6Au i9qHpDyLN7FCkQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:45:46 2025 by rpki-client